Bug #9340: change the web preview? - CUNY Academic Commons - CUNY Graduate Center - Project Tracking System

Custom queries

. 2.5.3 open
2.6.0 open
2.6.0 open (by category)
2.6.0 open (by tracker)
High Priority Issues by User
Inbox (no milestone)
My Assigned Issues (by milestone)
My Watched Issues (by milestone)
Not Tracked - grouped by assignee
Not tracked (milestone-independent)

Actions

Copy link

Bug #9340

closed

change the web preview?

Added by Marilyn Weber almost 7 years ago. Updated almost 7 years ago.

Status:

Resolved

Priority name:

Normal

Assignee:

Raymond Hoh

Category name:

WordPress Plugins

Target version:

1.12.10

Start date:

2018-03-03

Due date:

% Done:

Estimated time:

Deployment actions:

Description

user Michelle Zimmer asks
"Any idea how I can change the web preview (like on FB)? When I paste the link to my site (https://brewingbronx.commons.gc.cuny.edu), it says, "THE BRONX WAS BREWING" and the pic is there, but underneath it reads

/* Prevent direct access to this file */ if (!defined('ABSPATH')) { exit( __('Sorry, you are not allowed to access this file directly.', DFCG_DOMAIN) ); } ?>"

Thanks!

History
Notes

Actions

Copy link

Updated by Boone Gorges almost 7 years ago

Assignee set to Raymond Hoh

Ray, could you have a look at this? I think there are two issues here:

1. Why is an unrendered PHP template showing up here? This seems like a fairly serious problem, maybe a security issue.
2. Is it possible/easy for us to allow users to customize these previews? I think it'd mean using a plugin like https://wordpress.org/plugins/wonderm00ns-simple-facebook-open-graph-tags/

Actions

Copy link

Updated by Raymond Hoh almost 7 years ago

1. It's because the site is using a custom frontpage in the WP admin dashboard's "Settings > Reading" page. When this occurs and you visit the homepage, WordPress adds some meta to the <head> element, allowing for it to be discovered via oEmbed:

<link rel="alternate" type="application/json+oembed" href="JSON OEMBED URL HERE" />
<link rel="alternate" type="text/xml+oembed" href="JSON OEMBED URL HERE" />

When copying and pasting the website's link into the TinyMCE editor and how WordPress oEmbed discoverability is always enabled, it will render the contents of that oEmbed response.

I'm not getting an unrendered PHP template on my end. I'm actually getting the rendered <iframe>. Tested in a forum post and on a WordPress post on the Commons. I might be getting the iframe because I'm an admin though. ~~Haven't tested on a regular user account yet~~ Tested on a regular user account on a forum post and I'm not seeing the iframe as expected.

Does anyone have any steps to duplicate the Prevent direct access to this file response?

2. We can't easily allow the oEmbed response to be customized on a per-site basis.

I think the easiest thing would be to disable the oEmbed <head> additions when using a static frontpage as this would avoid confusion like this ticket has shown.

Actions

Copy link

Updated by Raymond Hoh almost 7 years ago

Marilyn, can you ask Michelle where she is pasting the link into?

Is she pasting the link somewhere on the Commons or into another site such as Facebook. If it is the latter, then using something like a Facebook Open Graph plugin could be a way to address this.

Some steps to duplicate would be great.

Thanks!

Actions

Copy link

Updated by Boone Gorges almost 7 years ago

Thanks for looking into this, Ray!

Actions

Copy link

Updated by Marilyn Weber almost 7 years ago

She replies "It was FB for sure and I think Twitter."

Actions

Copy link

Updated by Raymond Hoh almost 7 years ago

Category name set to WordPress Plugins
Target version set to 1.12.10

Okay, so Boone was correct that we'll have to install some form of Open Graph plugin.

The one that Boone linked to is highly-rated, so we'll probably add that one to the Commons for our next maintenance release, scheduled for mid-March.

Actions

Copy link

Updated by Boone Gorges almost 7 years ago

Status changed from New to Resolved

Plugin installed in https://github.com/cuny-academic-commons/cac/commit/d02c0d51cd0d5a2e360f4a0d17bf73e62aac3642.

Marilyn, could you please let the user know that they'll be able to activate this plugin and use it to modify the appearance of these cards. See https://wordpress.org/plugins/wonderm00ns-simple-facebook-open-graph-tags/#installation, step 3. If there are issues, please report them back.

Actions

Copy link

Also available in: Atom PDF

Project

General

Profile

CUNY Academic Commons

Custom queries

Bug #9340

change the web preview?

Updated by Boone Gorges almost 7 years ago

Updated by Raymond Hoh almost 7 years ago

Updated by Raymond Hoh almost 7 years ago

Updated by Boone Gorges almost 7 years ago

Updated by Marilyn Weber almost 7 years ago

Updated by Raymond Hoh almost 7 years ago

Updated by Boone Gorges almost 7 years ago